Senior Compliance Program Manager, GRC

keepersecurity; United States; Hybrid; USD 140,000 - 170,000; Full time

Benefits offered by this job

Medical coverage

Dental coverage

Vision coverage

Life insurance

Disability insurance

401(k) plan

Paid time off

Annual bonuses

Job summary

Keeper Security is seeking a Senior Security Compliance Manager to lead governance programs across enterprise environments in the United States. You will coordinate audits, continuous monitoring, vendor risk, policies, and training to translate regulatory obligations into actionable plans.

You will work with Security, Engineering, IT and governance teams to scope programs, track risks, and ensure evidence and documentation meet customer and regulatory requirements.

Qualifications

• 6+ years of progressive experience in information security compliance, governance, risk, audit, program management, or a related field.
• 3+ years leading audits, assessments, or compliance initiatives under frameworks such as NIST 800-53, FedRAMP, SOC 2, or ISO 27001.
• Working knowledge of NIST 800-53 Rev. 5, the NIST Risk Management Framework, FedRAMP, SOC 2, and ISO 27001.
• Experience managing complex cross-functional programs from planning through completion, including risks, issues, dependencies, and stakeholder communication.
• Experience with regulated or federal cloud environments and authorization materials such as system security plans, POA&Ms, or continuous monitoring evidence.
• Background in third-party risk, policy governance, security training, and controlled documentation reviews.

Responsibilities

• Coordinate audit cycles, compliance initiatives, evidence collection, remediation, and continuous monitoring activities.
• Set program scope, milestones, owners, dependencies, and reporting across Security, Engineering, DevOps, IT, and governance teams.
• Maintain integrated plans and risk, issue, and dependency tracking; raise blockers with practical recommendations.
• Support compliance documentation and responses for customer reviews, contracts, and requests for proposals.
• Assess vendors and business partners, review their security evidence, track risks, and coordinate remediation or risk acceptance.
• Maintain information security policies, standards, procedures, control narratives, system security documentation, and employee training.
• Explain technical and regulatory requirements clearly to auditors, leaders, employees, and other stakeholders.

Skills

Information security

Governance

Risk management

Audit

Program management

Job description

Role Overview

Manage security compliance and governance programs across enterprise and regulated environments. You will coordinate audits, continuous monitoring, remediation, vendor risk, policies, training, and supporting evidence, turning regulatory obligations into clear plans and accountable work across technical and business teams.

Responsibilities

• Coordinate audit cycles, compliance initiatives, evidence collection, remediation, and continuous monitoring activities.
• Set program scope, milestones, owners, dependencies, and reporting across Security, Engineering, DevOps, IT, and governance teams.
• Maintain integrated plans and risk, issue, and dependency tracking; raise blockers with practical recommendations.
• Support compliance documentation and responses for customer reviews, contracts, and requests for proposals.
• Assess vendors and business partners, review their security evidence, track risks, and coordinate remediation or risk acceptance.
• Maintain information security policies, standards, procedures, control narratives, system security documentation, and employee training.
• Explain technical and regulatory requirements clearly to auditors, leaders, employees, and other stakeholders.

Requirements

• 6+ years of progressive experience in information security compliance, governance, risk, audit, program management, or a related field.
• 3+ years leading audits, assessments, or compliance initiatives under frameworks such as NIST 800-53, FedRAMP, SOC 2, or ISO 27001.
• Working knowledge of NIST 800-53 Rev. 5, the NIST Risk Management Framework, FedRAMP, SOC 2, and ISO 27001.
• Experience managing complex cross-functional programs from planning through completion, including risks, issues, dependencies, and stakeholder communication.
• Experience with regulated or federal cloud environments and authorization materials such as system security plans, POA&Ms, or continuous monitoring evidence.
• Background in third-party risk, policy governance, security training, and controlled documentation reviews.

Nice to have

Relevant credentials may include PMP, CISSP, CISA, CISM, CRISC, CGRC, or ISO 27001 Lead Auditor. Direct FedRAMP High or DoD IL5 experience, vendor assessments, training platforms, and customer-facing security responses are also useful.

Benefits and work setup

The position is remote from select locations, with a hybrid option for candidates near Chicago or El Dorado Hills.

• medical coverage
• dental coverage
• vision coverage
• life insurance
• disability insurance
• 401(k) plan
• paid time off
• annual bonuses